* The first function is the current system with protection by blocking changes to the system for files inside the box;

* I suggest that the Sandboxie also protects the system to function "in reverse", where the browser is isolated from the system and any threat present in memory, with an option for access to banks. The sandbox Avast and Kaspersky work that way.